a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 09:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe
Size 10.6MB
Sample260730-lnxtaagk5t
SHA256 a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef
MD5 87f73b6486483fb849b425c326153983
SHA1 5ec86866b783c3433de4defd95a9f249424d6d59
SHA512 12bc08076e059ac4d2642da794f8616ad9fae07cc72558898c3fca089e6b5596e6c9bf2a75fbe7cde10f9be1018bbb3dbd6b78481bd65613230370f821f97ab4
SSDEEP 196608:DEMkvSSJ7PbDdh0HtQba8z1sjzkAilU4I4:D+v5J7PbDjOQba8psjzyz
TLSH
T16AB6E025FBD79305EB272634257C7D3B0720BAC41BE846CB52626C885675BE24833F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
50	4968	a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4968	a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe

C:\Users\Admin\AppData\Local\Temp\a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe
"C:\Users\Admin\AppData\Local\Temp\a8f3166c69a86f6c2900cd075bcbe94dc717eb4ee1a0903c351262a8bfba85ef.exe"
1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 3KB
SHA256 7a5fd67c6b43cd29c5d86893eede2cc5e5842d45390bf309e9d921043fdd9f15
MD5 4805644d1ab173e2e05981ba224719f0
SHA1 97176f067a09ba8db44042ea15859cfce1e16690
SHA512 201658c71a8990209f3a7d48bb448787b512c7f93d1a4183f0248b69310096c23436b788036ed112025117201f3ee542ee435c5588ff6fb35ac96300ba780545
TLSH
T1D161BB00AAB549A04708E99BABD00C86ECFCB2DD781DA4A273778D546BDA502FDBF454
MD5 SHA1 SHA512 TLSH

Submit Download

lite_installer.log

Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
Size 8KB
SHA256 4db4466cf6ee5673fdd0983f6f52d4c471782414966e3025afc58eaa339d78cb
MD5 ce8c843050f673671df31ddf6632bef4
SHA1 35c5849aa1b157f7776790c429280c0916bfbfde
SHA512 ee80d0ca2f98d2beaa69e0193a11eadbc729e2123aafac3087058a52fde1b282fb7c3049b87c4176d0e6b6e43d13034ed13e5fe79939863cd784830ee93e0b7c
SSDEEP 96:KOgTPl2qqDcf0HnHcSuMYmhzZbjY8J4rYwIDMoLZ2G:RgNMcfmeIDMkR
TLSH
T129027D0096B509A14708A8DBEED04C86ECECF2DE741AA4927377CE946BCA502FCBF455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Roaming\Yandex\ui
Size 38B
SHA256 60316800b90c5fa0e9af0511f08774b2d9db72ff110a027c335b4511c63ff684
MD5 6b773cc03fcfd7eb4108af505b1d274b
SHA1 02e641ca6b8ef8ab79a44f02c2cdd9d68b1f416a
SHA512 715954898b551256b1e1360507dab468f9f3bfed2d4b73e9999231a0714298c6ec6a2e2c742cd6b2dc13618c0df6b1a828a7c55f9de1358b152181bd846339c8
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads